Extracting prog: 19m48.846134576s Minimizing prog: 4m4.273956301s Simplifying prog options: 0s Extracting C: 12.974839575s Simplifying C: 1m9.851147039s extracting reproducer from 56 programs testing a last program of every proc single: executing 14 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-openat$tun-ioctl$TUNSETIFF-socket$nl_route-ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD-socket$netlink-preadv-ioctl$SIOCSIFHWADDR detailed listing: executing program 0: timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/20, 0x14}], 0x2f, 0x0, 0x10000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-socket$packet-read detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r0 = socket$packet(0x11, 0x2, 0x300) read(r0, &(0x7f0000000000)=""/149, 0xaa) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-listen-io_setup-eventfd2-io_submit-ppoll-shutdown detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000001100)=[{r2, 0x440}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-getsockopt$sock_cred-setresuid-bpf$MAP_CREATE detailed listing: executing program 0: r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=ANY=[@ANYBLOB="1a00000004000000800000000100000000000000", @ANYRES32=0x1, @ANYBLOB="01000000000000000000000000000000e2ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bb"], 0x50) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-getsockopt$sock_cred-setresuid-bpf$MAP_CREATE detailed listing: executing program 0: r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=ANY=[@ANYBLOB="1a00000004000000800000000100000000000000", @ANYRES32=0x1, @ANYBLOB="01000000000000000000000000000000e2ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bb"], 0x50) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-close detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-close detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_tx_ring-mmap-socket$inet6-connect$inet6-sendto$inet6-bpf$BPF_PROG_WITH_BTFID_LOAD-pselect6 detailed listing: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-fchdir-socket$unix-connect$unix detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-fchdir-socket$unix-connect$unix detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-socket$inet_icmp-ioctl$BINDER_GET_FROZEN_INFO-close_range-socket$inet6_tcp-setsockopt$inet6_udp_encap-socket$inet_icmp-signalfd4-fsopen-pipe2$9p-write$tcp_mem-ioctl$KDGKBDIACR-openat$full-ioctl$VFAT_IOCTL_READDIR_BOTH-syz_open_procfs-ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD-dup-write$FUSE_DIRENTPLUS-ioctl$F2FS_IOC_FLUSH_DEVICE-openat$full-write$FUSE_STATX-shutdown-recvfrom$inet_nvme detailed listing: executing program 0: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-socket$inet_icmp-ioctl$BINDER_GET_FROZEN_INFO-close_range-socket$inet6_tcp-setsockopt$inet6_udp_encap-socket$inet_icmp-signalfd4-fsopen-pipe2$9p-write$tcp_mem-ioctl$KDGKBDIACR-openat$full-ioctl$VFAT_IOCTL_READDIR_BOTH-syz_open_procfs-ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD-dup-write$FUSE_DIRENTPLUS-ioctl$F2FS_IOC_FLUSH_DEVICE-openat$full-write$FUSE_STATX-shutdown-recvfrom$inet_nvme detailed listing: executing program 0: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe2 detailed listing: executing program 0: pipe2(&(0x7f00000006c0), 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe2 detailed listing: executing program 0: pipe2(&(0x7f00000006c0), 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 56 programs with base timeout 30s testing program (duration=44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 4, 19, 29, 2, 1, 1, 30, 5, 16, 30, 30, 25, 25, 4, 3, 2, 3, 1, 2, 2, 3, 4, 3, 4, 4, 8, 3, 1, 3, 3, 2, 2, 1, 11, 5, 20, 5, 2, 9, 4, 4, 1, 2, 3, 4, 3, 8, 7, 3, 5, 27, 3, 17, 6, 12] detailed listing: executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5451, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_clone(0x18000, &(0x7f0000002380)="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", 0x1000, &(0x7f0000003380), &(0x7f00000033c0), &(0x7f0000003400)="4868d33699cbc8444f167693d358f07c742ea596d5d16ad87b41a4594854cb27f23f94bed5973dc82751d76475139b1567616f150a3a94f81d155eb0dc2bf3532f9fe4deb39f516b10ebdd96b05a364fe75e8b0cec419f3f48060e6caf213eb903262ca55471dfdf3610a77069a782556b833f40bcd851be475f5d1af0e9bd2a1e53186b585c4b55f74f79cfcccbe2dd8a2c03e02ff4baa48e0274cc25239cc166aca5b7b32040aed06034688dbcfc9e3ccbf25a228b1369bc8c5ef997dc682de6d0e0dfffc33d8b46546af6c7fe3ca64092d252a0f3f57ee8c2b8d315c6604cd07ed72b985fdcb8d0684877f33bf0dc5b686c") r2 = getpgid(0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() r4 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r4, 0x0, 0x81000004, 0x0) waitid(0x1, r4, 0x0, 0x81000004, 0x0) r5 = getpgid(0x0) syz_pidfd_open(r5, 0x0) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000022c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_clone3(&(0x7f0000002300)={0x10004000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x7}, &(0x7f0000000100)=""/225, 0xe1, &(0x7f0000000200), &(0x7f0000002280)=[r1, r2, r3, 0x0, r4, r5, r6, r7, 0xffffffffffffffff], 0x9, {r8}}, 0x58) executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0xaa, 0x0, 0x0, 0x0, 0xfd33}, 0x40002041) dup3(0xffffffffffffffff, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002340)={'batadv_slave_0\x00'}) executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x52104000, &(0x7f0000000000)="8749c8ed961c108b5a4930dbbb6db8890020f0829f63ad00c03cfbf92cc9649c18247feceb24a652ebcb962efa6bfb8b1bd52f84bb1560889f71da372eb12f9a2443b7ba9d75c0895986a89646639a2577e2f4cfbb70b3e9f0a8d96ab06d2daf17d188a10b0ebf6b", 0x68, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="c96ff46d517cf9253cc1d23190008f40973723d937e1054d0819bc06572e2e519d99") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$KDFONTOP_COPY(r4, 0x5452, &(0x7f00000001c0)={0x3, 0x10005, 0x3, 0xf, 0x15d, 0x0}) r5 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r6, 0x100000000000000, 0x2002) syz_open_procfs$namespace(r5, &(0x7f00000000c0)='ns/mnt\x00') waitid(0x1, r2, 0x0, 0x40000000, 0x0) read(0xffffffffffffffff, &(0x7f0000001140), 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000000140)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x5452, &(0x7f0000000140)={0x73622a85, 0x1101, 0xfffffffffffffffc}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x56) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000180)={{0x2c, @remote, 0x4e21, 0x4, 'sed\x00', 0x10, 0x2, 0x29}, {@multicast1, 0x4e20, 0x10000, 0x0, 0x5, 0x2}}, 0x44) executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x804, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) faccessat2(r1, &(0x7f00000019c0)='\x00', 0x3, 0x1100) r2 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, 0x0, 0x81000004, 0x0) waitid(0x2, r2, 0x0, 0x81000004, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x406, r4) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000140)='net/ip6_tables_names\x00') r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x2) r7 = dup(r6) accept$inet6(r7, 0x0, 0x0) read$FUSE(r7, &(0x7f0000005300)={0x2020, 0x0, 0x0, 0x0}, 0x2044) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x5450, 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) mount$9p_unix(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='./file0\x00', 0x0, 0x81400, 0x0) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000003280), 0x213001, 0x0) setuid(r8) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x8, 0x2}, {0x10360553}], r8}, 0x18, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x7, 0x7fffffffffffffff, 0x9d, 0x5, 0x1, 0x9}) setuid(0xee01) setxattr$system_posix_acl(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000002180)) executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x5451, 0x0) executing program 0: pipe2(&(0x7f00000006c0), 0x0) executing program 32: pipe2(&(0x7f00000006c0), 0x0) executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) getsockname(r3, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000180)=0x80) dup3(r3, r4, 0x80000) recvmmsg$unix(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x41, 0x0) syz_open_procfs(r5, &(0x7f0000000100)='smaps\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0x5451, 0x0) listen(r1, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) fcntl$addseals(r7, 0x2, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f00000000c0)="2d0c920aa70c3f0bf1027646979f4728", 0x10) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x5421, &(0x7f0000000080)) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = fcntl$dupfd(r1, 0x406, r0) r10 = accept(r9, 0x0, 0x0) ioctl$VT_OPENQRY(r10, 0x8904, &(0x7f0000000100)) r11 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x1, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_ATTR(r13, &(0x7f0000003900)={0x78, 0x0, 0x0, {0xfff, 0xb37e, 0x0, {0x5, 0xfffffffffffffffe, 0xb6fa, 0xfffffffffffffe01, 0x7, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x2}}}, 0x78) close(r12) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) executing program 1: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), 0x0) ioctl$TIOCGETD(r0, 0x5452, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x1, {{0xa, 0x4e22, 0x4, @mcast2, 0x9}}, {{0xa, 0x4e20, 0x10, @local, 0x6}}}, 0x108) executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5450, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x5450, 0x0) r3 = accept$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) statx(r4, &(0x7f0000003f00)='\x00', 0x3000, 0x80, &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000000c0)={{0x1, @remote, 0x4e22, 0x3, 'ovf\x00', 0x10, 0xfffff001, 0x5}, {@remote, 0x4e21, 0x1, 0xca, 0x537, 0xc}}, 0x44) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7800, 0x1, 0x0, 0x0, {{0x24, 0x4, 0x1, 0x6, 0x90, 0x64, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xe, 0x0, [{0x2, 0x3, "ab"}, {0x7, 0x5, "13e644"}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x2, 0xc, "a07356b3eba8dbc1fa18"}, {0x5, 0xb, "540900000075c7acb0"}]}, @lsrr={0x83, 0x7, 0x12, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x84, 0x3, 0x7, [{@multicast1, 0x317a}, {@multicast1, 0x6}, {@empty, 0xc4}, {@loopback, 0x6}]}, @rr={0x7, 0xb, 0xa5, [@loopback, @multicast1]}, @timestamp_addr={0x44, 0x4, 0x18, 0x1, 0x8}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x1, 0x4, "054f"}]}, @generic={0x89, 0xc, "4ea3c7a62c1a6b31cad4"}]}}}}}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@private1, @mcast2, @local, 0xc0000000, 0x8, 0xfa6, 0x500, 0x7, 0x20, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) setreuid(r5, r5) fcntl$getownex(r7, 0x10, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000002c0)={@remote, @private}, &(0x7f0000000300)=0x8) ioctl$TUNGETVNETBE(r1, 0x5451, 0x0) executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1240, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = dup3(r1, r1, 0x80000) write$FUSE_GETXATTR(r0, 0x0, 0x0) write$nbd(r2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101243, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1a01400, 0x0) r3 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) mlockall(0x3) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa8c0, 0x10a) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xd11f6a9e2954c0e1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x90080, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) r8 = dup3(r5, r7, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = dup3(r9, r4, 0x0) r11 = accept4$packet(r10, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_RM_DEV_V2(r11, 0x5451, 0x0) executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r0, 0xffffffff, 0x2, 0xd) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x40, 0x1}}, 0x14) write$9p(r3, &(0x7f00000000c0)="8912", 0x2) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = getpid() fcntl$setown(r4, 0x8, r6) r7 = fcntl$getown(r3, 0x9) tgkill(r6, r7, 0x34) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x80, 0x6, 0x6, 0x7, 0x0, 0xb, 0x58000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000140)}, 0x110000, 0xd90, 0x7, 0x4, 0xffffffffffff2a53, 0x2, 0x8, 0x0, 0x3, 0x0, 0x8}, r7, 0x7, r5, 0x3) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x10}) statx(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x800, 0x200, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8, r9, 0x1000) read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0x2020) fcntl$setownex(r2, 0xf, &(0x7f0000003340)={0x2, r7}) recvmmsg(r0, &(0x7f0000008080)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003380)=""/6, 0x6}, {&(0x7f00000033c0)=""/167, 0xa7}], 0x2, &(0x7f00000034c0)=""/69, 0x45}, 0x200}, {{&(0x7f0000003540)=@caif, 0x80, &(0x7f0000005740)=[{&(0x7f00000035c0)=""/118, 0x76}, {&(0x7f0000003640)=""/149, 0x95}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/45, 0x2d}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x5, &(0x7f00000057c0)=""/222, 0xde}, 0x1861}, {{&(0x7f00000058c0)=@tipc=@name, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005940)=""/181, 0xb5}, {&(0x7f0000005a00)=""/8, 0x8}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/57, 0x39}], 0x4}, 0x1}, {{&(0x7f0000006ac0)=@x25, 0x80, &(0x7f0000007c40)=[{&(0x7f0000006b40)=""/54, 0x36}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/174, 0xae}], 0x3, &(0x7f0000007c80)=""/17, 0x11}}, {{&(0x7f0000007cc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000008000)=[{&(0x7f0000007d40)=""/36, 0x24}, {&(0x7f0000007d80)=""/130, 0x82}, {&(0x7f0000007e40)=""/187, 0xbb}, {&(0x7f0000007f00)=""/200, 0xc8}], 0x4, &(0x7f0000008040)=""/53, 0x35}, 0x3}], 0x5, 0x2000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r10 = memfd_create(&(0x7f00000081c0)='ip6tnl0\x00', 0x6) timerfd_gettime(r10, &(0x7f0000008200)) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000008240)={0x0, "2f05b85469bd2e526edb13144abae5eb"}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000009240)={0x0, 0x85, @start={r11, 0x1, "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", "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"}, [0x7, 0xfff, 0x5, 0x3ff, 0x0, 0xfee7, 0x5, 0x9, 0x7, 0x8001, 0x2, 0x3, 0x4b4b, 0x0, 0x0, 0x4b5a, 0x4, 0xf3b, 0x100000001, 0x9, 0x100, 0x4, 0x7, 0xf09b, 0x1, 0x1, 0x644b, 0xe2cb, 0x4, 0x8, 0x200, 0x3, 0x2, 0x8391, 0x4800, 0x3, 0x4d7, 0x3, 0x9, 0x1, 0x1, 0x3, 0x4, 0x32, 0x1ff, 0x7, 0x2fe6, 0xfffffffffffffff9, 0x0, 0x200000000000000, 0x0, 0xbcd, 0x6, 0x7f, 0x2, 0x1, 0x5cbb, 0xf79, 0x2, 0xffff, 0x4, 0x1, 0x80000000, 0x8]}) shutdown(r5, 0x1) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000009d00)={&(0x7f0000009c80)='\x00', &(0x7f0000009cc0)='%[\x00', 0x6}) sendfile(r5, r1, &(0x7f0000009d40)=0xb220, 0x64e) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000009d80)={0x1, 0x1}, 0x4) fsopen(&(0x7f0000009dc0)='ramfs\x00', 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r12, 0x8919, &(0x7f0000009e00)={'pim6reg1\x00', {0x2, 0x0, @dev}}) executing program 1: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 33: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 3: removexattr(0x0, &(0x7f0000000200)=@known='system.posix_acl_default\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/102) executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 3: mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(r0, 0x0, &(0x7f0000000000)={0x8000000000000000, 0x8}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @empty, 0x1}, 0x1c) close(0x3) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x81000, 0x0) executing program 6: io_submit(0x0, 0x1, &(0x7f0000000b40)=[0x0]) executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) executing program 35: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @local, 0xff000000, 0xffffff00, 'macsec0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x62, 0x3, 0x31}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x1, 0x2, [0x40, 0x25, 0x23, 0x31, 0x1a, 0x3e, 0x1c, 0x16, 0x18, 0x3a, 0x1a, 0x30, 0x8, 0x1f, 0x30, 0x32], 0x2, 0x1000}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0xffffffff, 'sit0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x2e, 0x2, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x2, 0x7, 0x4, 0x0, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x4, 0x2, 0x4, 0x3, 0x1, 0x1], 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) executing program 4: capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x9, 0x1}, 0x48) executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000004000000000020000000000009030000000000000063"], 0x0, 0x52}, 0x28) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) executing program 7: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x28}}], 0x1, 0x4c840) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') executing program 7: getrandom(&(0x7f0000000040)=""/181, 0xb5, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f00000000c0), 0x0}, 0x20) executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x207, 0x4) executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000700000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff1100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 4: r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=ANY=[@ANYBLOB="1a00000004000000800000000100000000000000", @ANYRES32=0x1, @ANYBLOB="01000000000000000000000000000000e2ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bb"], 0x50) executing program 36: r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=ANY=[@ANYBLOB="1a00000004000000800000000100000000000000", @ANYRES32=0x1, @ANYBLOB="01000000000000000000000000000000e2ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bb"], 0x50) executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x61, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3160}, 0x50) executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) executing program 5: socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[], 0x0) executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) executing program 7: bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000001100)=[{r2, 0x440}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r0 = socket$packet(0x11, 0x2, 0x300) read(r0, &(0x7f0000000000)=""/149, 0xaa) executing program 8: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) executing program 8: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x101) r4 = socket(0xa, 0x3, 0x87) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) r6 = fcntl$dupfd(r3, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f0000000300)=ANY=[], 0xfffffdcf) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$unix(r6, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendto(r4, &(0x7f00000003c0), 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x20005}, 0x80) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x2) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'rose0\x00'}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") executing program 8: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0x4}}}}}, 0x0) executing program 8: fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x4, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x22eb, 0x8}}}}}}, 0x0) setresuid(0x0, 0x0, 0xee01) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0x9, 0x0, 0x0) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x100) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r0, &(0x7f0000000400)=""/65536, 0x10000) read(r0, &(0x7f0000010400)=""/65534, 0xfffe) executing program 8: timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/20, 0x14}], 0x2f, 0x0, 0x10000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) program crashed: fatal error: stack overflow bisect: bisecting 56 programs bisect: split chunks (needed=false): <56> bisect: split chunk #0 of len 56 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 3, 4, 3, 4, 4, 8, 3, 1, 3, 3, 2, 2, 1, 11, 5, 20, 5, 2, 9, 4, 4, 1, 2, 3, 4, 3, 8, 7, 3, 5, 27, 3, 17, 6, 12] detailed listing: executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 3: mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(r0, 0x0, &(0x7f0000000000)={0x8000000000000000, 0x8}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @empty, 0x1}, 0x1c) close(0x3) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x81000, 0x0) executing program 6: io_submit(0x0, 0x1, &(0x7f0000000b40)=[0x0]) executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) executing program 35: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @local, 0xff000000, 0xffffff00, 'macsec0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x62, 0x3, 0x31}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x1, 0x2, [0x40, 0x25, 0x23, 0x31, 0x1a, 0x3e, 0x1c, 0x16, 0x18, 0x3a, 0x1a, 0x30, 0x8, 0x1f, 0x30, 0x32], 0x2, 0x1000}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0xffffffff, 'sit0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x2e, 0x2, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x2, 0x7, 0x4, 0x0, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x4, 0x2, 0x4, 0x3, 0x1, 0x1], 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) executing program 4: capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x9, 0x1}, 0x48) executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000004000000000020000000000009030000000000000063"], 0x0, 0x52}, 0x28) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) executing program 7: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x28}}], 0x1, 0x4c840) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') executing program 7: getrandom(&(0x7f0000000040)=""/181, 0xb5, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f00000000c0), 0x0}, 0x20) executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x207, 0x4) executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000700000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff1100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 4: r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=ANY=[@ANYBLOB="1a00000004000000800000000100000000000000", @ANYRES32=0x1, @ANYBLOB="01000000000000000000000000000000e2ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bb"], 0x50) executing program 36: r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=ANY=[@ANYBLOB="1a00000004000000800000000100000000000000", @ANYRES32=0x1, @ANYBLOB="01000000000000000000000000000000e2ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bb"], 0x50) executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x61, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3160}, 0x50) executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) executing program 5: socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[], 0x0) executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) executing program 7: bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000001100)=[{r2, 0x440}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r0 = socket$packet(0x11, 0x2, 0x300) read(r0, &(0x7f0000000000)=""/149, 0xaa) executing program 8: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) executing program 8: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x101) r4 = socket(0xa, 0x3, 0x87) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) r6 = fcntl$dupfd(r3, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f0000000300)=ANY=[], 0xfffffdcf) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$unix(r6, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendto(r4, &(0x7f00000003c0), 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x20005}, 0x80) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x2) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'rose0\x00'}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFO40AUhv8ZZxPtaoutVogGJCIRkHBsBxANRQp6JAiIjoiYKOAkKHFBIlFQcQUaCk7ABSgoOAIHCFQ0oaM2sj1JhggIBSAh/q9487/x83jmWfotGYSQH8vd7WOn4188GAD+Io2Umr83BjVSq/9/XSulTlbGLm+OZs8Kp/nh9QSAIHj/8xMArvIGfJUHwfO702pch+zrAiRmlN6EgKn0NiQ2lHYhsKX0nqbrYb1p7lY819ype6VQWGGww+CEITe8v+6xQEnbn9CuN1vt/aLnuY1PFKP6181LLGv7099XrzeW1j8bErbSOQisKb2EVK83cUu0848nBusbX3x+CgqK7yYG/hScC0xr/pTQ/CPrVw+yzVZ7rlItlt2yW3Oc3KI1b1kLTjYyoji+4X+/I3/6o63/65XapEjisOj7DTuO/dyJ40uOm4z8TyIzFedCzelE34N/YjIcMobKCSGEEEIIIYQQQggh5MOZgIj+go7AWY2qnwIAAP//ntd3Nw==") executing program 8: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0x4}}}}}, 0x0) executing program 8: fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x4, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x22eb, 0x8}}}}}}, 0x0) setresuid(0x0, 0x0, 0xee01) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0x9, 0x0, 0x0) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x100) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r0, &(0x7f0000000400)=""/65536, 0x10000) read(r0, &(0x7f0000010400)=""/65534, 0xfffe) executing program 8: timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/20, 0x14}], 0x2f, 0x0, 0x10000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 4, 19, 29, 2, 1, 1, 30, 5, 16, 30, 30, 25, 25, 4, 3, 2, 3, 1, 2, 9, 4, 4, 1, 2, 3, 4, 3, 8, 7, 3, 5, 27, 3, 17, 6, 12] detailed listing: executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5451, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_clone(0x18000, &(0x7f0000002380)="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", 0x1000, &(0x7f0000003380), &(0x7f00000033c0), &(0x7f0000003400)="4868d33699cbc8444f167693d358f07c742ea596d5d16ad87b41a4594854cb27f23f94bed5973dc82751d76475139b1567616f150a3a94f81d155eb0dc2bf3532f9fe4deb39f516b10ebdd96b05a364fe75e8b0cec419f3f48060e6caf213eb903262ca55471dfdf3610a77069a782556b833f40bcd851be475f5d1af0e9bd2a1e53186b585c4b55f74f79cfcccbe2dd8a2c03e02ff4baa48e0274cc25239cc166aca5b7b32040aed06034688dbcfc9e3ccbf25a228b1369bc8c5ef997dc682de6d0e0dfffc33d8b46546af6c7fe3ca64092d252a0f3f57ee8c2b8d315c6604cd07ed72b985fdcb8d0684877f33bf0dc5b686c") r2 = getpgid(0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() r4 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r4, 0x0, 0x81000004, 0x0) waitid(0x1, r4, 0x0, 0x81000004, 0x0) r5 = getpgid(0x0) syz_pidfd_open(r5, 0x0) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000022c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_clone3(&(0x7f0000002300)={0x10004000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x7}, &(0x7f0000000100)=""/225, 0xe1, &(0x7f0000000200), &(0x7f0000002280)=[r1, r2, r3, 0x0, r4, r5, r6, r7, 0xffffffffffffffff], 0x9, {r8}}, 0x58) executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0xaa, 0x0, 0x0, 0x0, 0xfd33}, 0x40002041) dup3(0xffffffffffffffff, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002340)={'batadv_slave_0\x00'}) executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x52104000, &(0x7f0000000000)="8749c8ed961c108b5a4930dbbb6db8890020f0829f63ad00c03cfbf92cc9649c18247feceb24a652ebcb962efa6bfb8b1bd52f84bb1560889f71da372eb12f9a2443b7ba9d75c0895986a89646639a2577e2f4cfbb70b3e9f0a8d96ab06d2daf17d188a10b0ebf6b", 0x68, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="c96ff46d517cf9253cc1d23190008f40973723d937e1054d0819bc06572e2e519d99") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$KDFONTOP_COPY(r4, 0x5452, &(0x7f00000001c0)={0x3, 0x10005, 0x3, 0xf, 0x15d, 0x0}) r5 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r6, 0x100000000000000, 0x2002) syz_open_procfs$namespace(r5, &(0x7f00000000c0)='ns/mnt\x00') waitid(0x1, r2, 0x0, 0x40000000, 0x0) read(0xffffffffffffffff, &(0x7f0000001140), 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000000140)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x5452, &(0x7f0000000140)={0x73622a85, 0x1101, 0xfffffffffffffffc}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x56) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000180)={{0x2c, @remote, 0x4e21, 0x4, 'sed\x00', 0x10, 0x2, 0x29}, {@multicast1, 0x4e20, 0x10000, 0x0, 0x5, 0x2}}, 0x44) executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x804, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) faccessat2(r1, &(0x7f00000019c0)='\x00', 0x3, 0x1100) r2 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, 0x0, 0x81000004, 0x0) waitid(0x2, r2, 0x0, 0x81000004, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x406, r4) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000140)='net/ip6_tables_names\x00') r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x2) r7 = dup(r6) accept$inet6(r7, 0x0, 0x0) read$FUSE(r7, &(0x7f0000005300)={0x2020, 0x0, 0x0, 0x0}, 0x2044) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x5450, 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) mount$9p_unix(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='./file0\x00', 0x0, 0x81400, 0x0) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000003280), 0x213001, 0x0) setuid(r8) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x8, 0x2}, {0x10360553}], r8}, 0x18, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x7, 0x7fffffffffffffff, 0x9d, 0x5, 0x1, 0x9}) setuid(0xee01) setxattr$system_posix_acl(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000002180)) executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x5451, 0x0) executing program 0: pipe2(&(0x7f00000006c0), 0x0) executing program 32: pipe2(&(0x7f00000006c0), 0x0) executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) getsockname(r3, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000180)=0x80) dup3(r3, r4, 0x80000) recvmmsg$unix(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x41, 0x0) syz_open_procfs(r5, &(0x7f0000000100)='smaps\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0x5451, 0x0) listen(r1, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) fcntl$addseals(r7, 0x2, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f00000000c0)="2d0c920aa70c3f0bf1027646979f4728", 0x10) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x5421, &(0x7f0000000080)) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = fcntl$dupfd(r1, 0x406, r0) r10 = accept(r9, 0x0, 0x0) ioctl$VT_OPENQRY(r10, 0x8904, &(0x7f0000000100)) r11 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x1, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_ATTR(r13, &(0x7f0000003900)={0x78, 0x0, 0x0, {0xfff, 0xb37e, 0x0, {0x5, 0xfffffffffffffffe, 0xb6fa, 0xfffffffffffffe01, 0x7, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x2}}}, 0x78) close(r12) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) executing program 1: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), 0x0) ioctl$TIOCGETD(r0, 0x5452, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x1, {{0xa, 0x4e22, 0x4, @mcast2, 0x9}}, {{0xa, 0x4e20, 0x10, @local, 0x6}}}, 0x108) executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5450, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x5450, 0x0) r3 = accept$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) statx(r4, &(0x7f0000003f00)='\x00', 0x3000, 0x80, &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000000c0)={{0x1, @remote, 0x4e22, 0x3, 'ovf\x00', 0x10, 0xfffff001, 0x5}, {@remote, 0x4e21, 0x1, 0xca, 0x537, 0xc}}, 0x44) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7800, 0x1, 0x0, 0x0, {{0x24, 0x4, 0x1, 0x6, 0x90, 0x64, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xe, 0x0, [{0x2, 0x3, "ab"}, {0x7, 0x5, "13e644"}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x2, 0xc, "a07356b3eba8dbc1fa18"}, {0x5, 0xb, "540900000075c7acb0"}]}, @lsrr={0x83, 0x7, 0x12, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x84, 0x3, 0x7, [{@multicast1, 0x317a}, {@multicast1, 0x6}, {@empty, 0xc4}, {@loopback, 0x6}]}, @rr={0x7, 0xb, 0xa5, [@loopback, @multicast1]}, @timestamp_addr={0x44, 0x4, 0x18, 0x1, 0x8}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x1, 0x4, "054f"}]}, @generic={0x89, 0xc, "4ea3c7a62c1a6b31cad4"}]}}}}}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@private1, @mcast2, @local, 0xc0000000, 0x8, 0xfa6, 0x500, 0x7, 0x20, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) setreuid(r5, r5) fcntl$getownex(r7, 0x10, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000002c0)={@remote, @private}, &(0x7f0000000300)=0x8) ioctl$TUNGETVNETBE(r1, 0x5451, 0x0) executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1240, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = dup3(r1, r1, 0x80000) write$FUSE_GETXATTR(r0, 0x0, 0x0) write$nbd(r2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101243, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1a01400, 0x0) r3 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) mlockall(0x3) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa8c0, 0x10a) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xd11f6a9e2954c0e1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x90080, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) r8 = dup3(r5, r7, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = dup3(r9, r4, 0x0) r11 = accept4$packet(r10, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_RM_DEV_V2(r11, 0x5451, 0x0) executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r0, 0xffffffff, 0x2, 0xd) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x40, 0x1}}, 0x14) write$9p(r3, &(0x7f00000000c0)="8912", 0x2) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = getpid() fcntl$setown(r4, 0x8, r6) r7 = fcntl$getown(r3, 0x9) tgkill(r6, r7, 0x34) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x80, 0x6, 0x6, 0x7, 0x0, 0xb, 0x58000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000140)}, 0x110000, 0xd90, 0x7, 0x4, 0xffffffffffff2a53, 0x2, 0x8, 0x0, 0x3, 0x0, 0x8}, r7, 0x7, r5, 0x3) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x10}) statx(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x800, 0x200, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8, r9, 0x1000) read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0x2020) fcntl$setownex(r2, 0xf, &(0x7f0000003340)={0x2, r7}) recvmmsg(r0, &(0x7f0000008080)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003380)=""/6, 0x6}, {&(0x7f00000033c0)=""/167, 0xa7}], 0x2, &(0x7f00000034c0)=""/69, 0x45}, 0x200}, {{&(0x7f0000003540)=@caif, 0x80, &(0x7f0000005740)=[{&(0x7f00000035c0)=""/118, 0x76}, {&(0x7f0000003640)=""/149, 0x95}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/45, 0x2d}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x5, &(0x7f00000057c0)=""/222, 0xde}, 0x1861}, {{&(0x7f00000058c0)=@tipc=@name, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005940)=""/181, 0xb5}, {&(0x7f0000005a00)=""/8, 0x8}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/57, 0x39}], 0x4}, 0x1}, {{&(0x7f0000006ac0)=@x25, 0x80, &(0x7f0000007c40)=[{&(0x7f0000006b40)=""/54, 0x36}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/174, 0xae}], 0x3, &(0x7f0000007c80)=""/17, 0x11}}, {{&(0x7f0000007cc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000008000)=[{&(0x7f0000007d40)=""/36, 0x24}, {&(0x7f0000007d80)=""/130, 0x82}, {&(0x7f0000007e40)=""/187, 0xbb}, {&(0x7f0000007f00)=""/200, 0xc8}], 0x4, &(0x7f0000008040)=""/53, 0x35}, 0x3}], 0x5, 0x2000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r10 = memfd_create(&(0x7f00000081c0)='ip6tnl0\x00', 0x6) timerfd_gettime(r10, &(0x7f0000008200)) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000008240)={0x0, "2f05b85469bd2e526edb13144abae5eb"}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000009240)={0x0, 0x85, @start={r11, 0x1, "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", "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"}, [0x7, 0xfff, 0x5, 0x3ff, 0x0, 0xfee7, 0x5, 0x9, 0x7, 0x8001, 0x2, 0x3, 0x4b4b, 0x0, 0x0, 0x4b5a, 0x4, 0xf3b, 0x100000001, 0x9, 0x100, 0x4, 0x7, 0xf09b, 0x1, 0x1, 0x644b, 0xe2cb, 0x4, 0x8, 0x200, 0x3, 0x2, 0x8391, 0x4800, 0x3, 0x4d7, 0x3, 0x9, 0x1, 0x1, 0x3, 0x4, 0x32, 0x1ff, 0x7, 0x2fe6, 0xfffffffffffffff9, 0x0, 0x200000000000000, 0x0, 0xbcd, 0x6, 0x7f, 0x2, 0x1, 0x5cbb, 0xf79, 0x2, 0xffff, 0x4, 0x1, 0x80000000, 0x8]}) shutdown(r5, 0x1) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000009d00)={&(0x7f0000009c80)='\x00', &(0x7f0000009cc0)='%[\x00', 0x6}) sendfile(r5, r1, &(0x7f0000009d40)=0xb220, 0x64e) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000009d80)={0x1, 0x1}, 0x4) fsopen(&(0x7f0000009dc0)='ramfs\x00', 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r12, 0x8919, &(0x7f0000009e00)={'pim6reg1\x00', {0x2, 0x0, @dev}}) executing program 1: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 33: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 3: removexattr(0x0, &(0x7f0000000200)=@known='system.posix_acl_default\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/102) executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x207, 0x4) executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000700000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff1100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 4: r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=ANY=[@ANYBLOB="1a00000004000000800000000100000000000000", @ANYRES32=0x1, @ANYBLOB="01000000000000000000000000000000e2ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bb"], 0x50) executing program 36: r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=ANY=[@ANYBLOB="1a00000004000000800000000100000000000000", @ANYRES32=0x1, @ANYBLOB="01000000000000000000000000000000e2ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bb"], 0x50) executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x61, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3160}, 0x50) executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) executing program 5: socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[], 0x0) executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) executing program 7: bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000001100)=[{r2, 0x440}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r0 = socket$packet(0x11, 0x2, 0x300) read(r0, &(0x7f0000000000)=""/149, 0xaa) executing program 8: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) executing program 8: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x101) r4 = socket(0xa, 0x3, 0x87) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) r6 = fcntl$dupfd(r3, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f0000000300)=ANY=[], 0xfffffdcf) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$unix(r6, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendto(r4, &(0x7f00000003c0), 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x20005}, 0x80) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x2) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'rose0\x00'}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") executing program 8: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0x4}}}}}, 0x0) executing program 8: fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x4, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x22eb, 0x8}}}}}}, 0x0) setresuid(0x0, 0x0, 0xee01) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0x9, 0x0, 0x0) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x100) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r0, &(0x7f0000000400)=""/65536, 0x10000) read(r0, &(0x7f0000010400)=""/65534, 0xfffe) executing program 8: timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/20, 0x14}], 0x2f, 0x0, 0x10000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 4, 19, 29, 2, 1, 1, 30, 5, 16, 30, 30, 25, 25, 4, 3, 2, 3, 1, 2, 2, 3, 4, 3, 4, 4, 8, 3, 1, 3, 3, 2, 2, 1, 11, 5, 20, 5] detailed listing: executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5451, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_clone(0x18000, &(0x7f0000002380)="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", 0x1000, &(0x7f0000003380), &(0x7f00000033c0), &(0x7f0000003400)="4868d33699cbc8444f167693d358f07c742ea596d5d16ad87b41a4594854cb27f23f94bed5973dc82751d76475139b1567616f150a3a94f81d155eb0dc2bf3532f9fe4deb39f516b10ebdd96b05a364fe75e8b0cec419f3f48060e6caf213eb903262ca55471dfdf3610a77069a782556b833f40bcd851be475f5d1af0e9bd2a1e53186b585c4b55f74f79cfcccbe2dd8a2c03e02ff4baa48e0274cc25239cc166aca5b7b32040aed06034688dbcfc9e3ccbf25a228b1369bc8c5ef997dc682de6d0e0dfffc33d8b46546af6c7fe3ca64092d252a0f3f57ee8c2b8d315c6604cd07ed72b985fdcb8d0684877f33bf0dc5b686c") r2 = getpgid(0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() r4 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r4, 0x0, 0x81000004, 0x0) waitid(0x1, r4, 0x0, 0x81000004, 0x0) r5 = getpgid(0x0) syz_pidfd_open(r5, 0x0) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000022c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_clone3(&(0x7f0000002300)={0x10004000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x7}, &(0x7f0000000100)=""/225, 0xe1, &(0x7f0000000200), &(0x7f0000002280)=[r1, r2, r3, 0x0, r4, r5, r6, r7, 0xffffffffffffffff], 0x9, {r8}}, 0x58) executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0xaa, 0x0, 0x0, 0x0, 0xfd33}, 0x40002041) dup3(0xffffffffffffffff, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002340)={'batadv_slave_0\x00'}) executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x52104000, &(0x7f0000000000)="8749c8ed961c108b5a4930dbbb6db8890020f0829f63ad00c03cfbf92cc9649c18247feceb24a652ebcb962efa6bfb8b1bd52f84bb1560889f71da372eb12f9a2443b7ba9d75c0895986a89646639a2577e2f4cfbb70b3e9f0a8d96ab06d2daf17d188a10b0ebf6b", 0x68, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="c96ff46d517cf9253cc1d23190008f40973723d937e1054d0819bc06572e2e519d99") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$KDFONTOP_COPY(r4, 0x5452, &(0x7f00000001c0)={0x3, 0x10005, 0x3, 0xf, 0x15d, 0x0}) r5 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r6, 0x100000000000000, 0x2002) syz_open_procfs$namespace(r5, &(0x7f00000000c0)='ns/mnt\x00') waitid(0x1, r2, 0x0, 0x40000000, 0x0) read(0xffffffffffffffff, &(0x7f0000001140), 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000000140)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x5452, &(0x7f0000000140)={0x73622a85, 0x1101, 0xfffffffffffffffc}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x56) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000180)={{0x2c, @remote, 0x4e21, 0x4, 'sed\x00', 0x10, 0x2, 0x29}, {@multicast1, 0x4e20, 0x10000, 0x0, 0x5, 0x2}}, 0x44) executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x804, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) faccessat2(r1, &(0x7f00000019c0)='\x00', 0x3, 0x1100) r2 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, 0x0, 0x81000004, 0x0) waitid(0x2, r2, 0x0, 0x81000004, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x406, r4) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000140)='net/ip6_tables_names\x00') r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x2) r7 = dup(r6) accept$inet6(r7, 0x0, 0x0) read$FUSE(r7, &(0x7f0000005300)={0x2020, 0x0, 0x0, 0x0}, 0x2044) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x5450, 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) mount$9p_unix(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='./file0\x00', 0x0, 0x81400, 0x0) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000003280), 0x213001, 0x0) setuid(r8) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x8, 0x2}, {0x10360553}], r8}, 0x18, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x7, 0x7fffffffffffffff, 0x9d, 0x5, 0x1, 0x9}) setuid(0xee01) setxattr$system_posix_acl(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000002180)) executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x5451, 0x0) executing program 0: pipe2(&(0x7f00000006c0), 0x0) executing program 32: pipe2(&(0x7f00000006c0), 0x0) executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) getsockname(r3, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000180)=0x80) dup3(r3, r4, 0x80000) recvmmsg$unix(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x41, 0x0) syz_open_procfs(r5, &(0x7f0000000100)='smaps\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0x5451, 0x0) listen(r1, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) fcntl$addseals(r7, 0x2, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f00000000c0)="2d0c920aa70c3f0bf1027646979f4728", 0x10) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x5421, &(0x7f0000000080)) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = fcntl$dupfd(r1, 0x406, r0) r10 = accept(r9, 0x0, 0x0) ioctl$VT_OPENQRY(r10, 0x8904, &(0x7f0000000100)) r11 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x1, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_ATTR(r13, &(0x7f0000003900)={0x78, 0x0, 0x0, {0xfff, 0xb37e, 0x0, {0x5, 0xfffffffffffffffe, 0xb6fa, 0xfffffffffffffe01, 0x7, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x2}}}, 0x78) close(r12) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) executing program 1: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), 0x0) ioctl$TIOCGETD(r0, 0x5452, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x1, {{0xa, 0x4e22, 0x4, @mcast2, 0x9}}, {{0xa, 0x4e20, 0x10, @local, 0x6}}}, 0x108) executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5450, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x5450, 0x0) r3 = accept$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) statx(r4, &(0x7f0000003f00)='\x00', 0x3000, 0x80, &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000000c0)={{0x1, @remote, 0x4e22, 0x3, 'ovf\x00', 0x10, 0xfffff001, 0x5}, {@remote, 0x4e21, 0x1, 0xca, 0x537, 0xc}}, 0x44) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7800, 0x1, 0x0, 0x0, {{0x24, 0x4, 0x1, 0x6, 0x90, 0x64, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xe, 0x0, [{0x2, 0x3, "ab"}, {0x7, 0x5, "13e644"}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x2, 0xc, "a07356b3eba8dbc1fa18"}, {0x5, 0xb, "540900000075c7acb0"}]}, @lsrr={0x83, 0x7, 0x12, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x84, 0x3, 0x7, [{@multicast1, 0x317a}, {@multicast1, 0x6}, {@empty, 0xc4}, {@loopback, 0x6}]}, @rr={0x7, 0xb, 0xa5, [@loopback, @multicast1]}, @timestamp_addr={0x44, 0x4, 0x18, 0x1, 0x8}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x1, 0x4, "054f"}]}, @generic={0x89, 0xc, "4ea3c7a62c1a6b31cad4"}]}}}}}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@private1, @mcast2, @local, 0xc0000000, 0x8, 0xfa6, 0x500, 0x7, 0x20, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) setreuid(r5, r5) fcntl$getownex(r7, 0x10, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000002c0)={@remote, @private}, &(0x7f0000000300)=0x8) ioctl$TUNGETVNETBE(r1, 0x5451, 0x0) executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1240, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = dup3(r1, r1, 0x80000) write$FUSE_GETXATTR(r0, 0x0, 0x0) write$nbd(r2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101243, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1a01400, 0x0) r3 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) mlockall(0x3) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa8c0, 0x10a) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xd11f6a9e2954c0e1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x90080, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) r8 = dup3(r5, r7, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = dup3(r9, r4, 0x0) r11 = accept4$packet(r10, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_RM_DEV_V2(r11, 0x5451, 0x0) executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r0, 0xffffffff, 0x2, 0xd) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x40, 0x1}}, 0x14) write$9p(r3, &(0x7f00000000c0)="8912", 0x2) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = getpid() fcntl$setown(r4, 0x8, r6) r7 = fcntl$getown(r3, 0x9) tgkill(r6, r7, 0x34) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x80, 0x6, 0x6, 0x7, 0x0, 0xb, 0x58000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000140)}, 0x110000, 0xd90, 0x7, 0x4, 0xffffffffffff2a53, 0x2, 0x8, 0x0, 0x3, 0x0, 0x8}, r7, 0x7, r5, 0x3) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x10}) statx(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x800, 0x200, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8, r9, 0x1000) read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0x2020) fcntl$setownex(r2, 0xf, &(0x7f0000003340)={0x2, r7}) recvmmsg(r0, &(0x7f0000008080)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003380)=""/6, 0x6}, {&(0x7f00000033c0)=""/167, 0xa7}], 0x2, &(0x7f00000034c0)=""/69, 0x45}, 0x200}, {{&(0x7f0000003540)=@caif, 0x80, &(0x7f0000005740)=[{&(0x7f00000035c0)=""/118, 0x76}, {&(0x7f0000003640)=""/149, 0x95}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/45, 0x2d}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x5, &(0x7f00000057c0)=""/222, 0xde}, 0x1861}, {{&(0x7f00000058c0)=@tipc=@name, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005940)=""/181, 0xb5}, {&(0x7f0000005a00)=""/8, 0x8}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/57, 0x39}], 0x4}, 0x1}, {{&(0x7f0000006ac0)=@x25, 0x80, &(0x7f0000007c40)=[{&(0x7f0000006b40)=""/54, 0x36}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/174, 0xae}], 0x3, &(0x7f0000007c80)=""/17, 0x11}}, {{&(0x7f0000007cc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000008000)=[{&(0x7f0000007d40)=""/36, 0x24}, {&(0x7f0000007d80)=""/130, 0x82}, {&(0x7f0000007e40)=""/187, 0xbb}, {&(0x7f0000007f00)=""/200, 0xc8}], 0x4, &(0x7f0000008040)=""/53, 0x35}, 0x3}], 0x5, 0x2000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r10 = memfd_create(&(0x7f00000081c0)='ip6tnl0\x00', 0x6) timerfd_gettime(r10, &(0x7f0000008200)) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000008240)={0x0, "2f05b85469bd2e526edb13144abae5eb"}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000009240)={0x0, 0x85, @start={r11, 0x1, "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", "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"}, [0x7, 0xfff, 0x5, 0x3ff, 0x0, 0xfee7, 0x5, 0x9, 0x7, 0x8001, 0x2, 0x3, 0x4b4b, 0x0, 0x0, 0x4b5a, 0x4, 0xf3b, 0x100000001, 0x9, 0x100, 0x4, 0x7, 0xf09b, 0x1, 0x1, 0x644b, 0xe2cb, 0x4, 0x8, 0x200, 0x3, 0x2, 0x8391, 0x4800, 0x3, 0x4d7, 0x3, 0x9, 0x1, 0x1, 0x3, 0x4, 0x32, 0x1ff, 0x7, 0x2fe6, 0xfffffffffffffff9, 0x0, 0x200000000000000, 0x0, 0xbcd, 0x6, 0x7f, 0x2, 0x1, 0x5cbb, 0xf79, 0x2, 0xffff, 0x4, 0x1, 0x80000000, 0x8]}) shutdown(r5, 0x1) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000009d00)={&(0x7f0000009c80)='\x00', &(0x7f0000009cc0)='%[\x00', 0x6}) sendfile(r5, r1, &(0x7f0000009d40)=0xb220, 0x64e) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000009d80)={0x1, 0x1}, 0x4) fsopen(&(0x7f0000009dc0)='ramfs\x00', 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r12, 0x8919, &(0x7f0000009e00)={'pim6reg1\x00', {0x2, 0x0, @dev}}) executing program 1: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 33: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 3: removexattr(0x0, &(0x7f0000000200)=@known='system.posix_acl_default\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/102) executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 3: mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(r0, 0x0, &(0x7f0000000000)={0x8000000000000000, 0x8}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @empty, 0x1}, 0x1c) close(0x3) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x81000, 0x0) executing program 6: io_submit(0x0, 0x1, &(0x7f0000000b40)=[0x0]) executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) executing program 35: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @local, 0xff000000, 0xffffff00, 'macsec0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x62, 0x3, 0x31}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x1, 0x2, [0x40, 0x25, 0x23, 0x31, 0x1a, 0x3e, 0x1c, 0x16, 0x18, 0x3a, 0x1a, 0x30, 0x8, 0x1f, 0x30, 0x32], 0x2, 0x1000}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0xffffffff, 'sit0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x2e, 0x2, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x2, 0x7, 0x4, 0x0, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x4, 0x2, 0x4, 0x3, 0x1, 0x1], 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) executing program 4: capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x9, 0x1}, 0x48) executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000004000000000020000000000009030000000000000063"], 0x0, 0x52}, 0x28) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) executing program 7: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x28}}], 0x1, 0x4c840) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') executing program 7: getrandom(&(0x7f0000000040)=""/181, 0xb5, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f00000000c0), 0x0}, 0x20) program crashed: fatal error: stack overflow bisect: the chunk can be dropped bisect: split chunks (needed=true): <19>, <19> bisect: split chunk #0 of len 19 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 25, 25, 4, 3, 2, 3, 1, 2, 2, 3, 4, 3, 4, 4, 8, 3, 1, 3, 3, 2, 2, 1, 11, 5, 20, 5] detailed listing: executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1240, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = dup3(r1, r1, 0x80000) write$FUSE_GETXATTR(r0, 0x0, 0x0) write$nbd(r2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101243, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1a01400, 0x0) r3 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) mlockall(0x3) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa8c0, 0x10a) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xd11f6a9e2954c0e1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x90080, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) r8 = dup3(r5, r7, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = dup3(r9, r4, 0x0) r11 = accept4$packet(r10, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_RM_DEV_V2(r11, 0x5451, 0x0) executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r0, 0xffffffff, 0x2, 0xd) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x40, 0x1}}, 0x14) write$9p(r3, &(0x7f00000000c0)="8912", 0x2) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = getpid() fcntl$setown(r4, 0x8, r6) r7 = fcntl$getown(r3, 0x9) tgkill(r6, r7, 0x34) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x80, 0x6, 0x6, 0x7, 0x0, 0xb, 0x58000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000140)}, 0x110000, 0xd90, 0x7, 0x4, 0xffffffffffff2a53, 0x2, 0x8, 0x0, 0x3, 0x0, 0x8}, r7, 0x7, r5, 0x3) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x10}) statx(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x800, 0x200, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8, r9, 0x1000) read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0x2020) fcntl$setownex(r2, 0xf, &(0x7f0000003340)={0x2, r7}) recvmmsg(r0, &(0x7f0000008080)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003380)=""/6, 0x6}, {&(0x7f00000033c0)=""/167, 0xa7}], 0x2, &(0x7f00000034c0)=""/69, 0x45}, 0x200}, {{&(0x7f0000003540)=@caif, 0x80, &(0x7f0000005740)=[{&(0x7f00000035c0)=""/118, 0x76}, {&(0x7f0000003640)=""/149, 0x95}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/45, 0x2d}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x5, &(0x7f00000057c0)=""/222, 0xde}, 0x1861}, {{&(0x7f00000058c0)=@tipc=@name, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005940)=""/181, 0xb5}, {&(0x7f0000005a00)=""/8, 0x8}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/57, 0x39}], 0x4}, 0x1}, {{&(0x7f0000006ac0)=@x25, 0x80, &(0x7f0000007c40)=[{&(0x7f0000006b40)=""/54, 0x36}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/174, 0xae}], 0x3, &(0x7f0000007c80)=""/17, 0x11}}, {{&(0x7f0000007cc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000008000)=[{&(0x7f0000007d40)=""/36, 0x24}, {&(0x7f0000007d80)=""/130, 0x82}, {&(0x7f0000007e40)=""/187, 0xbb}, {&(0x7f0000007f00)=""/200, 0xc8}], 0x4, &(0x7f0000008040)=""/53, 0x35}, 0x3}], 0x5, 0x2000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r10 = memfd_create(&(0x7f00000081c0)='ip6tnl0\x00', 0x6) timerfd_gettime(r10, &(0x7f0000008200)) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000008240)={0x0, "2f05b85469bd2e526edb13144abae5eb"}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000009240)={0x0, 0x85, @start={r11, 0x1, "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", "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"}, [0x7, 0xfff, 0x5, 0x3ff, 0x0, 0xfee7, 0x5, 0x9, 0x7, 0x8001, 0x2, 0x3, 0x4b4b, 0x0, 0x0, 0x4b5a, 0x4, 0xf3b, 0x100000001, 0x9, 0x100, 0x4, 0x7, 0xf09b, 0x1, 0x1, 0x644b, 0xe2cb, 0x4, 0x8, 0x200, 0x3, 0x2, 0x8391, 0x4800, 0x3, 0x4d7, 0x3, 0x9, 0x1, 0x1, 0x3, 0x4, 0x32, 0x1ff, 0x7, 0x2fe6, 0xfffffffffffffff9, 0x0, 0x200000000000000, 0x0, 0xbcd, 0x6, 0x7f, 0x2, 0x1, 0x5cbb, 0xf79, 0x2, 0xffff, 0x4, 0x1, 0x80000000, 0x8]}) shutdown(r5, 0x1) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000009d00)={&(0x7f0000009c80)='\x00', &(0x7f0000009cc0)='%[\x00', 0x6}) sendfile(r5, r1, &(0x7f0000009d40)=0xb220, 0x64e) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000009d80)={0x1, 0x1}, 0x4) fsopen(&(0x7f0000009dc0)='ramfs\x00', 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r12, 0x8919, &(0x7f0000009e00)={'pim6reg1\x00', {0x2, 0x0, @dev}}) executing program 1: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 33: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 3: removexattr(0x0, &(0x7f0000000200)=@known='system.posix_acl_default\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/102) executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 3: mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(r0, 0x0, &(0x7f0000000000)={0x8000000000000000, 0x8}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @empty, 0x1}, 0x1c) close(0x3) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x81000, 0x0) executing program 6: io_submit(0x0, 0x1, &(0x7f0000000b40)=[0x0]) executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) executing program 35: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @local, 0xff000000, 0xffffff00, 'macsec0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x62, 0x3, 0x31}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x1, 0x2, [0x40, 0x25, 0x23, 0x31, 0x1a, 0x3e, 0x1c, 0x16, 0x18, 0x3a, 0x1a, 0x30, 0x8, 0x1f, 0x30, 0x32], 0x2, 0x1000}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0xffffffff, 'sit0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x2e, 0x2, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x2, 0x7, 0x4, 0x0, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x4, 0x2, 0x4, 0x3, 0x1, 0x1], 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) executing program 4: capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x9, 0x1}, 0x48) executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000004000000000020000000000009030000000000000063"], 0x0, 0x52}, 0x28) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) executing program 7: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x28}}], 0x1, 0x4c840) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') executing program 7: getrandom(&(0x7f0000000040)=""/181, 0xb5, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f00000000c0), 0x0}, 0x20) program crashed: fatal error: stack overflow bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 19 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 25, 25, 4, 3, 2, 3, 1, 3, 3, 2, 2, 1, 11, 5, 20, 5] detailed listing: executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1240, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = dup3(r1, r1, 0x80000) write$FUSE_GETXATTR(r0, 0x0, 0x0) write$nbd(r2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101243, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1a01400, 0x0) r3 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) mlockall(0x3) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa8c0, 0x10a) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xd11f6a9e2954c0e1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x90080, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) r8 = dup3(r5, r7, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = dup3(r9, r4, 0x0) r11 = accept4$packet(r10, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_RM_DEV_V2(r11, 0x5451, 0x0) executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r0, 0xffffffff, 0x2, 0xd) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x40, 0x1}}, 0x14) write$9p(r3, &(0x7f00000000c0)="8912", 0x2) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = getpid() fcntl$setown(r4, 0x8, r6) r7 = fcntl$getown(r3, 0x9) tgkill(r6, r7, 0x34) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x80, 0x6, 0x6, 0x7, 0x0, 0xb, 0x58000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000140)}, 0x110000, 0xd90, 0x7, 0x4, 0xffffffffffff2a53, 0x2, 0x8, 0x0, 0x3, 0x0, 0x8}, r7, 0x7, r5, 0x3) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x10}) statx(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x800, 0x200, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8, r9, 0x1000) read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0x2020) fcntl$setownex(r2, 0xf, &(0x7f0000003340)={0x2, r7}) recvmmsg(r0, &(0x7f0000008080)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003380)=""/6, 0x6}, {&(0x7f00000033c0)=""/167, 0xa7}], 0x2, &(0x7f00000034c0)=""/69, 0x45}, 0x200}, {{&(0x7f0000003540)=@caif, 0x80, &(0x7f0000005740)=[{&(0x7f00000035c0)=""/118, 0x76}, {&(0x7f0000003640)=""/149, 0x95}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/45, 0x2d}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x5, &(0x7f00000057c0)=""/222, 0xde}, 0x1861}, {{&(0x7f00000058c0)=@tipc=@name, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005940)=""/181, 0xb5}, {&(0x7f0000005a00)=""/8, 0x8}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/57, 0x39}], 0x4}, 0x1}, {{&(0x7f0000006ac0)=@x25, 0x80, &(0x7f0000007c40)=[{&(0x7f0000006b40)=""/54, 0x36}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/174, 0xae}], 0x3, &(0x7f0000007c80)=""/17, 0x11}}, {{&(0x7f0000007cc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000008000)=[{&(0x7f0000007d40)=""/36, 0x24}, {&(0x7f0000007d80)=""/130, 0x82}, {&(0x7f0000007e40)=""/187, 0xbb}, {&(0x7f0000007f00)=""/200, 0xc8}], 0x4, &(0x7f0000008040)=""/53, 0x35}, 0x3}], 0x5, 0x2000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r10 = memfd_create(&(0x7f00000081c0)='ip6tnl0\x00', 0x6) timerfd_gettime(r10, &(0x7f0000008200)) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000008240)={0x0, "2f05b85469bd2e526edb13144abae5eb"}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000009240)={0x0, 0x85, @start={r11, 0x1, "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", "2e8e85f681a6724d2869ac0f989e5545d6e6d11fc3dce3d6bb162b1a659baf784d194e08eae9acaafde36b646d2efadfb5a72c77f4228a1b92dc095d00101c0cb306062da3cfd4dab7a9af25e1da532a48bff7f38c3834c8ed3de06c7531656617de36755f63d50ef97d232b9b7f9d0acf04f5d4614301cc56e7fc58686e8f02d832c9d3312c063bc309ed307b3e9ac54f88ce2eadc7463260159f93b2d48a4e2d60ca62c2402187cb4e7b781cce7f8de55d348a23bdb6bd24f9ca56b70d881760cec99e717327d6f53c2e85e9649a670ee84b2fdf1e7bb2e527dc21b4640f038a3099f6ae7db277c50890b4604fb422df30f7a00c22daa36c5b75c0488c5d801936c41f837b1b06f896006b3d6ab10daf238320948eeaa9a945f41e311aacb109928b6ff676e89e0fefc8622dc8e473782ea290b46c7620cdd7abf2ee1ade048b22c7c346c930a4514608e4087772b2db46e8eac847c35696a1d289ea36ed1b4af5cf8761ef7092d0d40e91fcccf461d53d46c2e2dbddcf9996d0fb87f5e010e8e2bdf9fdb1d79e0e59313dfb69852a440a07fa68610bcbcd754fe18d0f7941cce652a3ab6d9600ef64f2dae0d9d86a1ec24d7709a1145f6e47ba25bcc8aad129530c227be1d06d695be18255cd22d8b3936d31cb132552719f3da9dc3e755d38e930d53de51aab2a408e618a8848b890f5178c0e3d7f390db1cc97bf02317fd2a06c0170ddde96bbec07f503a77c9f4c875a027411aaa7612dac6407ed6fbf9744ea0033864ca05ed5298e372cdc68e7c35a6187a7c73a3548aff6a23c2604e0eafbeb100ad4b15f9012636a17a71a35ee4e4546f7ee723dfa6840f7771da140613c6a903b95ecbf43b16b28407cc4011c15936344c62ca9fcee732cab45427a234530ac8e85dbb205fb3e2982d596b81559b11b87cd6a7b18b7324e187538314a37aaca3d3cc2757c9a30bce139c200c4dadfdbe036843dd0d1680b4540f0495537acdbdeaf0edc917355a559d279d61e286d667dad275566b349f0e4cffa0b7c669e5ed24ee85b5ed0b9e87704c4e60717de9c83177bc1c9d4413515d776185a58dacd30c44a888929e8653f8f17dd072a90be269a038f8542bf038cbedc6d1626cc759ce89fe48fb396c9a1557da7e273c91faf3932c83bf7def3462f669980ba08de391e8c42c6fd0f46565e0535d78b080eebae400dd5505bf0c797c150fa0ed1c161fde6083d65a5aba984ccc4c382d1f87be43e32b361e386d4f285578c8b0b094ce3d61b725e1c3c111fbd701cb4fa9c23af53b35df8ea59078760b87fd9a07b4c2c1eb084fdbfa9c0ca517f1a3400f28e93d26447068466aafc84b7d04c3bcf4c7306584b61cd3500a7152d8f181988b9ae49a4ad8cfb4b866aba5c9318251f3e1bbc8186a3afb3760f13041277cfff699e1b5eaa405ec861b8d0aa"}, [0x7, 0xfff, 0x5, 0x3ff, 0x0, 0xfee7, 0x5, 0x9, 0x7, 0x8001, 0x2, 0x3, 0x4b4b, 0x0, 0x0, 0x4b5a, 0x4, 0xf3b, 0x100000001, 0x9, 0x100, 0x4, 0x7, 0xf09b, 0x1, 0x1, 0x644b, 0xe2cb, 0x4, 0x8, 0x200, 0x3, 0x2, 0x8391, 0x4800, 0x3, 0x4d7, 0x3, 0x9, 0x1, 0x1, 0x3, 0x4, 0x32, 0x1ff, 0x7, 0x2fe6, 0xfffffffffffffff9, 0x0, 0x200000000000000, 0x0, 0xbcd, 0x6, 0x7f, 0x2, 0x1, 0x5cbb, 0xf79, 0x2, 0xffff, 0x4, 0x1, 0x80000000, 0x8]}) shutdown(r5, 0x1) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000009d00)={&(0x7f0000009c80)='\x00', &(0x7f0000009cc0)='%[\x00', 0x6}) sendfile(r5, r1, &(0x7f0000009d40)=0xb220, 0x64e) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000009d80)={0x1, 0x1}, 0x4) fsopen(&(0x7f0000009dc0)='ramfs\x00', 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r12, 0x8919, &(0x7f0000009e00)={'pim6reg1\x00', {0x2, 0x0, @dev}}) executing program 1: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 33: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 3: removexattr(0x0, &(0x7f0000000200)=@known='system.posix_acl_default\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/102) executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) executing program 35: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) close(0x3) executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @local, 0xff000000, 0xffffff00, 'macsec0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x62, 0x3, 0x31}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x1, 0x2, [0x40, 0x25, 0x23, 0x31, 0x1a, 0x3e, 0x1c, 0x16, 0x18, 0x3a, 0x1a, 0x30, 0x8, 0x1f, 0x30, 0x32], 0x2, 0x1000}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0xffffffff, 'sit0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x2e, 0x2, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x2, 0x7, 0x4, 0x0, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x4, 0x2, 0x4, 0x3, 0x1, 0x1], 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) executing program 4: capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x9, 0x1}, 0x48) executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000004000000000020000000000009030000000000000063"], 0x0, 0x52}, 0x28) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) executing program 7: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x28}}], 0x1, 0x4c840) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') executing program 7: getrandom(&(0x7f0000000040)=""/181, 0xb5, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f00000000c0), 0x0}, 0x20) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 25, 25, 4, 3, 2, 3, 1, 2, 2, 3, 4, 3, 4, 4, 8, 3, 1] detailed listing: executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1240, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = dup3(r1, r1, 0x80000) write$FUSE_GETXATTR(r0, 0x0, 0x0) write$nbd(r2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101243, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1a01400, 0x0) r3 = syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) waitid(0x1, r3, 0x0, 0x81000004, 0x0) mlockall(0x3) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa8c0, 0x10a) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xd11f6a9e2954c0e1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x90080, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) r8 = dup3(r5, r7, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = dup3(r9, r4, 0x0) r11 = accept4$packet(r10, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_RM_DEV_V2(r11, 0x5451, 0x0) executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r0, 0xffffffff, 0x2, 0xd) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x40, 0x1}}, 0x14) write$9p(r3, &(0x7f00000000c0)="8912", 0x2) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = getpid() fcntl$setown(r4, 0x8, r6) r7 = fcntl$getown(r3, 0x9) tgkill(r6, r7, 0x34) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x80, 0x6, 0x6, 0x7, 0x0, 0xb, 0x58000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000140)}, 0x110000, 0xd90, 0x7, 0x4, 0xffffffffffff2a53, 0x2, 0x8, 0x0, 0x3, 0x0, 0x8}, r7, 0x7, r5, 0x3) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x10}) statx(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x800, 0x200, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8, r9, 0x1000) read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0x2020) fcntl$setownex(r2, 0xf, &(0x7f0000003340)={0x2, r7}) recvmmsg(r0, &(0x7f0000008080)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003380)=""/6, 0x6}, {&(0x7f00000033c0)=""/167, 0xa7}], 0x2, &(0x7f00000034c0)=""/69, 0x45}, 0x200}, {{&(0x7f0000003540)=@caif, 0x80, &(0x7f0000005740)=[{&(0x7f00000035c0)=""/118, 0x76}, {&(0x7f0000003640)=""/149, 0x95}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/45, 0x2d}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x5, &(0x7f00000057c0)=""/222, 0xde}, 0x1861}, {{&(0x7f00000058c0)=@tipc=@name, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005940)=""/181, 0xb5}, {&(0x7f0000005a00)=""/8, 0x8}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/57, 0x39}], 0x4}, 0x1}, {{&(0x7f0000006ac0)=@x25, 0x80, &(0x7f0000007c40)=[{&(0x7f0000006b40)=""/54, 0x36}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/174, 0xae}], 0x3, &(0x7f0000007c80)=""/17, 0x11}}, {{&(0x7f0000007cc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000008000)=[{&(0x7f0000007d40)=""/36, 0x24}, {&(0x7f0000007d80)=""/130, 0x82}, {&(0x7f0000007e40)=""/187, 0xbb}, {&(0x7f0000007f00)=""/200, 0xc8}], 0x4, &(0x7f0000008040)=""/53, 0x35}, 0x3}], 0x5, 0x2000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r10 = memfd_create(&(0x7f00000081c0)='ip6tnl0\x00', 0x6) timerfd_gettime(r10, &(0x7f0000008200)) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000008240)={0x0, "2f05b85469bd2e526edb13144abae5eb"}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000009240)={0x0, 0x85, @start={r11, 0x1, "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", "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"}, [0x7, 0xfff, 0x5, 0x3ff, 0x0, 0xfee7, 0x5, 0x9, 0x7, 0x8001, 0x2, 0x3, 0x4b4b, 0x0, 0x0, 0x4b5a, 0x4, 0xf3b, 0x100000001, 0x9, 0x100, 0x4, 0x7, 0xf09b, 0x1, 0x1, 0x644b, 0xe2cb, 0x4, 0x8, 0x200, 0x3, 0x2, 0x8391, 0x4800, 0x3, 0x4d7, 0x3, 0x9, 0x1, 0x1, 0x3, 0x4, 0x32, 0x1ff, 0x7, 0x2fe6, 0xfffffffffffffff9, 0x0, 0x200000000000000, 0x0, 0xbcd, 0x6, 0x7f, 0x2, 0x1, 0x5cbb, 0xf79, 0x2, 0xffff, 0x4, 0x1, 0x80000000, 0x8]}) shutdown(r5, 0x1) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000009d00)={&(0x7f0000009c80)='\x00', &(0x7f0000009cc0)='%[\x00', 0x6}) sendfile(r5, r1, &(0x7f0000009d40)=0xb220, 0x64e) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000009d80)={0x1, 0x1}, 0x4) fsopen(&(0x7f0000009dc0)='ramfs\x00', 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r12, 0x8919, &(0x7f0000009e00)={'pim6reg1\x00', {0x2, 0x0, @dev}}) executing program 1: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 33: r0 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x71) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r2, 0x5450, 0x0) close_range(r1, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x7]}, 0x8, 0x800) fsopen(&(0x7f00000000c0)='squashfs\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) write$tcp_mem(r5, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x5451, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x5451, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='limits\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5451, 0x0) r7 = dup(r3) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000100)={0x9, 0x1}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002200), 0x201, 0x0) write$FUSE_STATX(r8, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000040), 0x0, 0x40000122, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3, {0xa, 0x4e2a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffd}}}, 0x80) executing program 3: removexattr(0x0, &(0x7f0000000200)=@known='system.posix_acl_default\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/102) executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 3: mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(r0, 0x0, &(0x7f0000000000)={0x8000000000000000, 0x8}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @empty, 0x1}, 0x1c) close(0x3) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x81000, 0x0) executing program 6: io_submit(0x0, 0x1, &(0x7f0000000b40)=[0x0]) program crashed: fatal error: stack overflow bisect: the chunk can be dropped bisect: split chunks (needed=true): <9>, <10> bisect: split chunk #0 of len 9 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 2, 3, 1, 2, 2, 3, 4, 3, 4, 4, 8, 3, 1] detailed listing: executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/102) executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 3: mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(r0, 0x0, &(0x7f0000000000)={0x8000000000000000, 0x8}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @empty, 0x1}, 0x1c) close(0x3) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x81000, 0x0) executing program 6: io_submit(0x0, 0x1, &(0x7f0000000b40)=[0x0]) program crashed: fatal error: stack overflow bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 2, 3, 1, 4, 4, 8, 3, 1] detailed listing: executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/102) executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x81000, 0x0) executing program 6: io_submit(0x0, 0x1, &(0x7f0000000b40)=[0x0]) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 2, 3, 1, 2, 2, 3, 4, 3] detailed listing: executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/102) executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 3: mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(r0, 0x0, &(0x7f0000000000)={0x8000000000000000, 0x8}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @empty, 0x1}, 0x1c) close(0x3) program did not crash bisect: split chunks (needed=true): <4>, <5>, <5> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 2, 2, 3, 4, 3, 4, 4, 8, 3, 1] detailed listing: executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 3: mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(r0, 0x0, &(0x7f0000000000)={0x8000000000000000, 0x8}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @empty, 0x1}, 0x1c) close(0x3) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x81000, 0x0) executing program 6: io_submit(0x0, 0x1, &(0x7f0000000b40)=[0x0]) program crashed: fatal error: stack overflow bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 4, 3, 4, 4, 8, 3, 1] detailed listing: executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 3: mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(r0, 0x0, &(0x7f0000000000)={0x8000000000000000, 0x8}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @empty, 0x1}, 0x1c) close(0x3) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x81000, 0x0) executing program 6: io_submit(0x0, 0x1, &(0x7f0000000b40)=[0x0]) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 2, 2, 3, 4, 4, 8, 3, 1] detailed listing: executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x81000, 0x0) executing program 6: io_submit(0x0, 0x1, &(0x7f0000000b40)=[0x0]) program crashed: fatal error: stack overflow bisect: the chunk can be dropped bisect: split chunk #2 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 2, 2, 3, 3, 1] detailed listing: executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x81000, 0x0) executing program 6: io_submit(0x0, 0x1, &(0x7f0000000b40)=[0x0]) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1, 2, 2, 3, 4, 4, 8] detailed listing: executing program 2: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow bisect: the chunk can be dropped bisect: split chunks (needed=true): <2>, <3>, <3> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2, 2, 3, 4, 4, 8] detailed listing: executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 3, 4, 4, 8] detailed listing: executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x95) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2, 2, 4, 4, 8] detailed listing: executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 34: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow bisect: the chunk can be dropped bisect: split chunk #2 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2, 2, 8] detailed listing: executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1>, <2>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2, 8] detailed listing: executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #2 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunks (needed=true): <1, final>, <1>, <1, final> bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 3 programs left: executing program 3: waitid(0x0, 0x0, 0x0, 0x40000000, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) bisect: trying to concatenate bisect: concatenate 3 entries minimizing program #0 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 8] detailed listing: executing program 0: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow minimized 1 calls -> 0 calls minimizing program #1 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 1, 8] detailed listing: executing program 3: executing program 0: socket$inet6(0xa, 0x3, 0xff) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 1, 8] detailed listing: executing program 3: executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xa9d3, 0x7}, 0x0, 0x0, 0x0, 0x0) program did not crash minimized 2 calls -> 2 calls minimizing program #2 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 7] detailed listing: executing program 3: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) program crashed: fatal error: stack overflow testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 6] detailed listing: executing program 3: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 5] detailed listing: executing program 3: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 5] detailed listing: executing program 3: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 5] detailed listing: executing program 3: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 5] detailed listing: executing program 3: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 4] detailed listing: executing program 3: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 3] detailed listing: executing program 3: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow minimized 8 calls -> 3 calls testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow bisect: concatenation succeeded found reproducer with 5 syscalls minimizing guilty program testing program (duration=27.089289804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) program did not crash testing program (duration=27.089289804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-sendto$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program did not crash testing program (duration=27.089289804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-connect$inet6-sendto$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program did not crash testing program (duration=27.089289804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-socket$inet6-connect$inet6-sendto$inet6 detailed listing: executing program 0: socket$inet6(0xa, 0x3, 0xff) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program did not crash testing program (duration=27.089289804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 detailed listing: executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program did not crash testing program (duration=27.089289804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program did not crash testing program (duration=27.089289804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program did not crash testing program (duration=27.089289804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=27.089289804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=27.089289804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 program crashed: fatal error: stack overflow simplifying C reproducer testing compiled C program (duration=27.089289804s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 program crashed: fatal error: stack overflow testing compiled C program (duration=27.089289804s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 program crashed: fatal error: stack overflow testing compiled C program (duration=27.089289804s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 program crashed: fatal error: stack overflow testing compiled C program (duration=27.089289804s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 program crashed: fatal error: stack overflow testing compiled C program (duration=27.089289804s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 program crashed: fatal error: stack overflow testing compiled C program (duration=27.089289804s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 program crashed: fatal error: stack overflow testing program (duration=27.089289804s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow validation run: crashed=true testing program (duration=27.089289804s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow validation run: crashed=true testing program (duration=27.089289804s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket$inet6-connect$inet6-sendto$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xfffffffb, @empty, 0x10000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) program crashed: fatal error: stack overflow validation run: crashed=true reproducing took 25m54.934642689s repro crashed as (corrupted=false): fatal error: stack overflow runtime stack: runtime.throw({0xfd1b47?, 0x35fee49b0008?}) GOROOT/src/runtime/panic.go:1229 +0x38 fp=0x35fee50b9e80 sp=0x35fee50b9e50 pc=0x96428 runtime.newstack() GOROOT/src/runtime/stack.go:1178 +0x498 fp=0x35fee50b9fb0 sp=0x35fee50b9e80 pc=0x7b5f8 runtime.morestack() src/runtime/asm_arm64.s:507 +0x70 fp=0x35fee50b9fb0 sp=0x35fee50b9fb0 pc=0x9caa0 final repro crashed as (corrupted=false): fatal error: stack overflow runtime stack: runtime.throw({0xfd1b47?, 0x35fee49b0008?}) GOROOT/src/runtime/panic.go:1229 +0x38 fp=0x35fee50b9e80 sp=0x35fee50b9e50 pc=0x96428 runtime.newstack() GOROOT/src/runtime/stack.go:1178 +0x498 fp=0x35fee50b9fb0 sp=0x35fee50b9e80 pc=0x7b5f8 runtime.morestack() src/runtime/asm_arm64.s:507 +0x70 fp=0x35fee50b9fb0 sp=0x35fee50b9fb0 pc=0x9caa0